mirror of
https://github.com/rubenhensen/k8scd.git
synced 2026-09-17 10:22:54 +02:00
Ruben Hensen
53 lines
1.9 KiB
Nix
53 lines
1.9 KiB
Nix
{ lib, pkgs, ... }:
|
|
let
|
|
sshPort = 22;
|
|
sshKey = "[%%sshKey%%]";
|
|
nixVersion = "[%%nixVersion%%]"; # 24.05
|
|
nodeName = "[%%nodeName%%]"; # node001
|
|
|
|
clusterNode = lib.fileset.toList (lib.fileset.maybeMissing ./cluster_node.nix);
|
|
controlNode = lib.fileset.toList (lib.fileset.maybeMissing ./control_node.nix);
|
|
standaloneMachine = lib.fileset.toList (lib.fileset.maybeMissing ./standalone_machine.nix);
|
|
nodeConfig = lib.fileset.toList (lib.fileset.maybeMissing ./[%%nodeName%%].nix);
|
|
modules = lib.fileset.toList (lib.fileset.maybeMissing ./modules/default.nix);
|
|
appModules = lib.fileset.toList (lib.fileset.maybeMissing ./app_modules/default.nix);
|
|
in
|
|
{
|
|
imports = [
|
|
./hardware-configuration.nix
|
|
./networking.nix # generated at runtime by nixos-infect
|
|
] ++ clusterNode ++ controlNode ++ nodeConfig ++ standaloneMachine ++ modules ++ appModules;
|
|
|
|
boot.tmp.cleanOnBoot = true;
|
|
zramSwap.enable = true;
|
|
system.stateVersion = nixVersion;
|
|
|
|
networking.hostName = nodeName;
|
|
networking.domain = "";
|
|
users.users.root.openssh.authorizedKeys.keys = [ sshKey ];
|
|
networking.firewall.enable = true;
|
|
networking.firewall.allowedTCPPorts = [ sshPort ];
|
|
networking.firewall.allowedUDPPorts = [ ];
|
|
|
|
services.openssh.enable = true;
|
|
services.openssh.settings.PermitRootLogin = "yes";
|
|
services.openssh.settings.PasswordAuthentication = false;
|
|
services.openssh.settings.KbdInteractiveAuthentication = false;
|
|
services.openssh.settings.LogLevel = "ERROR";
|
|
services.openssh.settings.Macs = [
|
|
"hmac-sha2-512-etm@openssh.com"
|
|
"hmac-sha2-512" # Required for dartssh
|
|
"hmac-sha2-256-etm@openssh.com"
|
|
"hmac-sha2-256" # Required for dartssh
|
|
"umac-128-etm@openssh.com"
|
|
];
|
|
|
|
services.rsyncd.enable = true;
|
|
|
|
# Enable Flakes
|
|
nix.settings.experimental-features = [ "nix-command" "flakes" ];
|
|
environment.systemPackages = with pkgs; [
|
|
# Flakes clones its dependencies through the git command
|
|
git
|
|
];
|
|
} |